bitcoinsuisseexchange[.]com

Analysis of bitcoinsuisseexchange.com reveals a high-risk phishing domain actively targeting cryptocurrency users. The domain was registered on July 6, 2021, through Dynadot Inc, a registrar frequently associated with fraudulent activity. Infrastructure analysis indicates the domain resolves to IP address 141.95.170.198 and utilizes Cloudflare nameservers (arnold.ns.cloudflare.com and perla.ns.cloudflare.com), a configuration commonly observed in phishing campaigns to obscure hosting origins and evade takedowns. As of July 27, 2026, the domain remains active and is flagged by one security blocklist, including PhishDestroy, which classifies it as malicious.

VirusTotal data shows marginal detection, with only 1 of 91 security vendors identifying the domain as a threat, suggesting either recent activation or evasion techniques to bypass automated scanners. The domain’s registration age—over five years—is atypical for short-lived phishing sites, raising concerns about persistence or delayed activation. No specific brand impersonation or scam subtype (e.g., crypto drainer, giveaway) is confirmed in available data, though the domain name suggests an intent to mimic legitimate cryptocurrency exchange services. The exact content and functionality of the site remain unanalyzed, as no page title, SSL certificate details, or HTTP response data were provided.

Defenders should treat this domain as a confirmed phishing threat, particularly for users interacting with cryptocurrency platforms. Immediate blocking at the DNS or network level is recommended, alongside monitoring for related infrastructure (e.g., IP 141.95.170.198, Cloudflare nameserver reuse) to identify linked campaigns. Further investigation into the domain’s hosting provider and associated ASN may reveal additional compromised or malicious assets.